High severity8.8NVD Advisory· Published Oct 21, 2025· Updated Jun 17, 2026
CVE-2025-6541
CVE-2025-6541
Description
An arbitrary OS command may be executed on the product by the user who can log in to the web management interface.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
29cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er605_firmware:*:*:*:*:*:*:*:*range: <2.3.1
- cpe:2.3:o:tp-link:er605_firmware:2.3.1:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er706w-4g_firmware:*:*:*:*:*:*:*:*range: <1.2.1
- cpe:2.3:o:tp-link:er706w-4g_firmware:1.2.1:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er706w_firmware:*:*:*:*:*:*:*:*range: <1.2.1
- cpe:2.3:o:tp-link:er706w_firmware:1.2.1:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er707-m2_firmware:*:*:*:*:*:*:*:*range: <1.3.1
- cpe:2.3:o:tp-link:er707-m2_firmware:1.3.1:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er7206_firmware:*:*:*:*:*:*:*:*range: <2.2.2
- cpe:2.3:o:tp-link:er7206_firmware:2.2.2:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er7212pc_firmware:*:*:*:*:*:*:*:*range: <2.1.3
- cpe:2.3:o:tp-link:er7212pc_firmware:2.1.3:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er7412-m2_firmware:*:*:*:*:*:*:*:*range: <1.1.0
- cpe:2.3:o:tp-link:er7412-m2_firmware:1.1.0:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:er8411_firmware:*:*:*:*:*:*:*:*range: <1.3.3
- cpe:2.3:o:tp-link:er8411_firmware:1.3.3:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:fr205_firmware:*:*:*:*:*:*:*:*range: <1.0.3
- cpe:2.3:o:tp-link:fr205_firmware:1.0.3:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:fr307-m2_firmware:*:*:*:*:*:*:*:*range: <1.2.5
- cpe:2.3:o:tp-link:fr307-m2_firmware:1.2.5:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:fr365_firmware:*:*:*:*:*:*:*:*range: <1.1.10
- cpe:2.3:o:tp-link:fr365_firmware:1.1.10:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:g36_firmware:*:*:*:*:*:*:*:*range: <1.1.4
- cpe:2.3:o:tp-link:g36_firmware:1.1.4:-:*:*:*:*:*:*
cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:tp-link:g611_firmware:*:*:*:*:*:*:*:*range: <1.2.2
- cpe:2.3:o:tp-link:g611_firmware:1.2.2:-:*:*:*:*:*:*
- TP-Link Systems Inc./Festa gatewaysv5Range: 0
0+ 1 more
- (no CPE)range: 0
- (no CPE)range: 0
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.